CCI-002796

Develop an incident response plan that describes the structure and organization of the incident response capability.

Implementation Guidance

The organization being inspected/assessed defines and documents within their incident response plan, the structure and organization of the incident response capability.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response plan to ensure the organization being inspected/assessed describes within their plan, the structure and organization of the incident response capability.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing flow chart section

The controls below (if any) were marked by NIST as being related to CCI-002796.